Short practice
Use focused decision missions rather than adding another long course to the employee workload.
EMPLOYEE CYBERSECURITY PRACTICE
CoMaSy gives employees realistic choices involving payment requests, executive impersonation, supplier changes, account compromise and other social-engineering pressure. The aim is to build a repeatable habit: pause, verify independently and escalate when needed.
THE DECISION GAP
Real incidents do not arrive with a label saying ‘phishing’. A message may come from a real account. A caller may know internal details. A process exception may look reasonable. Decision rehearsal helps employees practise the verification step before the pressure is real.
Use focused decision missions rather than adding another long course to the employee workload.
Prioritise scenarios that match the cohort’s actual workflows, such as payments, payroll, supplier changes or privileged actions.
Explain why one response is stronger and reinforce the reusable verification principle behind the choice.
MEASUREMENT
Pilot reporting can compare defined decision signals before and after targeted practice using materially varied scenarios.
Read the methodology →BUYER QUESTIONS
The pilot is designed around short scenario decisions rather than a long course. Exact duration depends on the agreed scenario set.
A pilot can focus on relevant workflows and pressure patterns without promising an unlimited authoring platform.
Reporting granularity should be agreed before the pilot. Cohort-level reporting can be used where individual-level analysis is not required.
No. CoMaSy is a training and measurement layer, not a substitute for technical security controls, policy or incident response.
DEFINED COHORT. DEFINED METRICS. DEFINED DECISION POINT.